$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa File: 47ea71af-c756-4483-ae88-621f2adb4c49.roa (raw, json) Hash identifier: NXDAbjafoDcnvmIQvN/y3r3ErRyKnNCjJ2JCGFSi8Mo= Subject key identifier: CB:F5:65:18:3D:5B:4E:AA:AB:05:80:AA:D5:BB:E0:01:59:D3:2C:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42EB05B5E01438B6482BB8FF4B1E297D554E0FF3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa Signing time: Fri 11 Jul 2025 00:01:05 +0000 ROA not before: Fri 11 Jul 2025 00:01:05 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 104.153.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:eb:05:b5:e0:14:38:b6:48:2b:b8:ff:4b:1e:29:7d:55:4e:0f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:01:05 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=c909ec4cbd90621b5b17265980e3426551e23e7ecf377a7e2842b436281586ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:10:9b:61:83:7c:22:1b:3f:07:01:22:8b: 46:29:08:64:d5:64:39:ee:c7:5a:6a:6e:b7:4e:ed: 3c:89:fd:40:77:83:04:63:e9:19:80:2a:cc:d6:6b: fd:36:99:db:0f:b9:60:44:30:23:af:08:5e:79:bb: 64:de:61:9f:1a:3b:0b:e4:fb:d0:6d:8e:67:9b:13: 32:56:c9:02:ef:5f:ba:51:cf:84:be:c8:e4:fd:65: 1f:51:8a:09:b9:05:3c:1d:76:5a:61:bc:1a:e8:54: a8:82:b5:2e:99:7e:99:f5:63:a3:35:b0:81:b0:d2: 61:67:c6:d1:f4:3c:ac:a0:7e:cb:3f:92:90:2c:6f: f0:29:6d:39:81:f4:08:45:5b:c6:70:81:34:c0:b8: 35:02:21:d1:76:a2:29:02:8d:79:4a:b5:4e:ce:8e: a7:19:24:f9:23:74:21:3c:41:ea:ec:fb:91:06:e7: d5:e8:9e:2c:de:54:5d:9a:79:eb:e2:d3:5c:9f:ec: ec:f3:28:9c:15:3f:73:8d:3f:2c:44:5a:d4:5d:02: 77:49:29:4c:c0:41:d0:2d:ad:85:dc:87:1e:17:95: f2:3c:54:9a:5c:7a:64:4c:78:da:b2:9f:cb:a1:1a: c3:6c:03:0d:d3:e2:c3:43:cd:91:1f:83:25:ee:fb: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F5:65:18:3D:5B:4E:AA:AB:05:80:AA:D5:BB:E0:01:59:D3:2C:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.153.116.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ff:07:d9:a9:3c:5f:0e:ec:ce:3c:d5:bf:b6:ff:a6:51:ad: a5:71:9e:a9:c2:8c:9d:e4:91:0e:bb:99:46:f7:a3:42:9f:5a: 4c:61:60:06:73:41:f8:f4:40:de:af:ed:99:b2:96:48:a4:4a: 1a:67:e9:af:12:90:d4:e2:ce:7f:6e:07:cf:7e:4f:da:ed:c1: 03:8c:f0:a3:8f:5d:23:34:6c:e6:b6:a2:fc:d3:72:c1:76:92: c2:18:87:d7:10:82:e6:84:1b:f2:58:37:96:28:1e:fb:88:e5: 6a:71:ad:43:05:cc:87:06:0a:7d:53:35:26:16:f3:c4:fb:da: e0:5c:c1:5f:27:c7:8d:e3:a2:78:b3:fe:2a:4c:4b:ef:e3:4c: 72:a5:f9:5d:a9:96:1b:22:dd:ad:e3:49:a7:2a:0f:fd:59:d7: 1e:02:18:a3:f5:c2:f3:7e:30:be:27:5a:72:00:fd:40:0c:7c: f2:d2:38:dd:09:ee:6e:10:bf:3e:85:85:67:f8:ae:1f:8a:0e: 86:34:ca:4d:29:76:01:fe:31:b8:e9:11:b5:48:0c:23:f1:e1: 92:9c:0e:55:f1:65:2f:77:b2:17:3b:f2:81:97:32:90:fa:1a: 1d:fa:92:cf:85:20:d8:ff:8a:de:39:d3:87:5e:5c:57:e6:d0: bf:53:1e:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQusFteAUOLZIK7j/Sx4pfVVOD/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAwMTA1WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTA5ZWM0Y2JkOTA2MjFiNWIxNzI2NTk4MGUzNDI2NTUx ZTIzZTdlY2YzNzdhN2UyODQyYjQzNjI4MTU4NmVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ7BCbYYN8Ihs/BwEii0YpCGTVZDnux1pqbrdO7TyJ/UB3 gwRj6RmAKszWa/02mdsPuWBEMCOvCF55u2TeYZ8aOwvk+9BtjmebEzJWyQLvX7pR z4S+yOT9ZR9Rigm5BTwddlphvBroVKiCtS6Zfpn1Y6M1sIGw0mFnxtH0PKygfss/ kpAsb/ApbTmB9AhFW8ZwgTTAuDUCIdF2oikCjXlKtU7OjqcZJPkjdCE8Qers+5EG 59XonizeVF2aeevi01yf7OzzKJwVP3ONPyxEWtRdAndJKUzAQdAtrYXchx4XlfI8 VJpcemRMeNqyn8uhGsNsAw3T4sNDzZEfgyXu+y2DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy/VlGD1bTqqrBYCq1bvgAVnTLOkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3ZWE3MWFmLWM3NTYtNDQ4My1hZTg4LTYyMWYyYWRiNGM0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABomXQwDQYJKoZIhvcNAQELBQADggEBACr/B9mpPF8O7M481b+2/6ZRraVx nqnCjJ3kkQ67mUb3o0KfWkxhYAZzQfj0QN6v7ZmylkikShpn6a8SkNTizn9uB89+ T9rtwQOM8KOPXSM0bOa2ovzTcsF2ksIYh9cQguaEG/JYN5YoHvuI5WpxrUMFzIcG Cn1TNSYW88T72uBcwV8nx43joniz/ipMS+/jTHKl+V2plhsi3a3jSacqD/1Z1x4C GKP1wvN+ML4nWnIA/UAMfPLSON0J7m4Qvz6FhWf4rh+KDoY0yk0pdgH+MbjpEbVI DCPx4ZKcDlXxZS93shc78oGXMpD6Gh36ks+FINj/it4504deXFfm0L9THrM= -----END CERTIFICATE-----Generated at Mon Jul 21 23:45:39 2025 by rpki-client